CTFs (Capture the Flag) 


Find the detailed version of this roadmap 


along with resources and other roadmaps 


HackTheBox 


Cyber Security https://roadmap.sh 
TryHackMe 


VulnHub 


picoCTF Fundamental IT Skills 


SANS Holiday Hack Challenge Computer Hardware Components 


Certifications Connection Types and their function coccce 


OS-Independent Troubleshooting 


Understand Basics of Popular Suites = [e°*sees Google Suite Microsoft Office Suite 


Basics of Computer Networking 


Beginner Certifications 


CompTIA A+ CompTIA Linux+ 


CompTIA Network+ CCNA 


Advanced Certifications 


Operating Systems 


CISSP CISA CISM 


GSEC GPEN GWAPT 


Learn following for Each 


GIAC OSCP CREST 


Installation and Configuration 


CEH Different Versions and Differences 


Navigating using GUI and CLI 


Understand Permissions 


Common Virtualization Technologies 


Installing Software and Applications 


Performing CRUD on Files 


Troubleshooting 


Common Commands 


Understand these 


Troubleshooting Tools 


iptables Packet Sniffers 


Port Scanners 


tcpdump 


Understand the OSI model 


Function of Each 
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Network Topologies adler Networking Knowledge 


tracert 


Common Protocols and their Uses 


Authentication Methodologies Understand Common Protocols 


Common Ports and their Uses 


Kerberos LDAP SSO 


SSL and TLS Basics 


Certificates Local Auth RADIUS 


Basics of NAS and SAN 


Understand Common Hacking Tools 


Understand Common Exploit Frameworks 
Blue Team vs Red Team vs Purple Team 


Understand Concept of Defense in Depth 
False Negative / False Positive 


True Negative / True Positive 


Understand Concept of Runbooks 


Understand Basics of Forensics Basics of Threat Intel, OSINT 


Basics and Concepts of Threat Hunting Understand Handshakes 
Basics of Vulnerability Management Understand CIA Triad 


Basics of Reverse Engineering Privilege escalation / User based Attacks 


Penetration Testing Rules of Engagement Web Based Attacks and OWASP 10 


Perimiter vs DMZ vs Segmentation 


Learn how Malware Operates and Types 


eeccces Security Skills and Knowledge 


Basics of Cryptography Attack Types and Differences 


| eu | Sating TEY ER TANIE Phishing vs Vishing vs Whaling vs Smishing 
cat Pvt Key vs Pub Key Obfuscation Spam vs Spim Shoulder Surfing 
wireshark | | winhex s E 

Wireshark Understand Secure vs Unsecure Protocols Dumpster Diving Tailgating 


Understand Frameworks DNSSEC LDAPS SRTP S/MIME Watering Hole Attack 
ATT&CK Kill chain Diamond Model Drive by Attack Typo Squatting 
Understand the following Terms 


Understand Common Standards Brute Force vs Password Spray 


sia Pea aimo Heien Albee HIPS Common Network Based Attacks 
Understand Common Distros for Hacking NIDS |] NIPS Host Based Firewall DoS vs DDoS MITM 
SIEM || SOAR ParrotOS Sandboxing EAP vs PEAP Evil Twin DNS Poisoning 
WPA vs WPA2 vs WPA3 vs WEP WPS 
Using tools for unintended purposes Deauth Attack 


LOLBAS 


Learn how to find and use these logs Identification 
Packet Captures Firewall Logs 


Understand Threat Classification 


Understand Common Tools 
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Rogue Access Point 


Buffer Overflow Memory Leak XSS 
SQL Injection CSRF Replay Attack 


Pass the Hash 


Understand the Incident Response Process 


Understand Audience 


Stakeholders Legal 


VirusTotal Joe Sandbox WHOIS 


Understand Hardening Concepts 


MAC-based NAC-based Port Blocking 
Group Policy Sinkholes | | Patching 


Cloud skills and Knowledge 


Understand Cloud Services Common Cloud Environments 


Cloud Models Common Cloud Storage 


Google Drive 


Programming Skills and Knowledge (Optional But Recommended) [°°°°°°°°°°csssscece Python 
me “ste "7 JavaScript 
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